Requiring the Maryland Health Care Commission to adopt regulations for
the privacy and security of protected health information obtained or
released through a health information exchange by specified persons;
requiring the regulations to include protections for the secondary use
of specified information; providing that the regulations do not apply
to protected health information exchanged between and among specified
persons; etc.